Pihole Log Space Warnings

Expected Behaviour:

No warnings
-Unraid

cat /etc/os-release 
NAME=Slackware
VERSION="15.0"
ID=slackware
VERSION_ID=15.0
PRETTY_NAME="Slackware 15.0 x86_64 (post 15.0 -current)"
ANSI_COLOR="0;34"
CPE_NAME="cpe:/o:slackware:slackware_linux:15.0"
HOME_URL="http://slackware.com/"
SUPPORT_URL="http://www.linuxquestions.org/questions/slackware-14/"
BUG_REPORT_URL="http://www.linuxquestions.org/questions/slackware-14/"
VERSION_CODENAME=current
  • HP Gen8 Proliant Microserver

Actual Behaviour:

Type: DISK, Message: Disk Shortage (/var/log/pihole/FTL.log) ahead: 99% used
/var/log/pihole: 21.3GB used, 21.5GB total

Debug Token:

https://tricorder.pi-hole.net/IMuX7VH9/

Compose File: https://dpaste.org/n0mu8
Screenshot_20230809_183237_Termius.jpg (544×149) (discordapp.com)
image.png (511×41) (discordapp.com)
image.png (581×39) (discordapp.com)

The title "Pihole Log Space Warnings" is not precise.
The warning is not about LOG space. Something else is using too much space on your disk.

Type: DISK, Message: Disk Shortage ...

The warning is informing your Disk is running out of space.

The path /var/log/pihole/FTL.log is there just because the warning was generated when Pi-hole was writing to this file.

I mean 21GB of pihole logs (based on "/var/log/pihole: 21.3GB used", but maybe that's a red herring?) seems excessive. But you can build up that amount of compressed logs in a year on a very busy system that's getting, say, 2 million queries a day.

By default, Pi-hole rotates the logs at midnight every night, using logrotate if it's available and keeps 5 days worth of logs. This can be modified by the user, of course, so you can check this in /etc/cron.d/pihole in the section that begins "Pi-hole: Flush the log daily at 00:00" and see what it's doing in your setup.

Assuming that's working, it will compress your logs every night, creating a bunch of .gz (compressed) files in /var/log/pihole. You should see only 5 days worth in that directory. If you see more, or don't need these old logs you can safely delete *.gz from that folder...

sudo rm /var/log/pihole/*.gz

You may also want to see if /etc/pihole/pihole-FTL.db is getting big. If that's taking up several GB of space you can just delete it too and Pi-hole will automatically recreate it...

sudo service pihole-FTL stop
sudo rm /etc/pihole/pihole-FTL.db
sudo service pihole-FTL start

Then recheck your disk space with the following, especially looking at the /dev/root line:

df -h

If the disk use isn't from the above two locations, then you'll need to find what is using 20GB of space and remove it, or work around it.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.